Privacy Policy
BLU is a Shopify app that helps online stores grow sales through customer segments, automated messages (such as cash-on-delivery order confirmation and abandoned cart reminders) and AI-drafted campaigns that the merchant reviews and approves. This policy explains what data BLU handles, why, where it is kept, and how it is deleted.
1. Who is responsible
Merchants (stores that install BLU) decide how their customers' data is used. For that data, the merchant is the controller and BLU is a processor acting on the merchant's instructions.
For merchant account data (the store and the staff who use BLU), BLU is the controller.
Contact: privacy@getblu.uk
2. Data we collect
From the merchant's Shopify store (with the merchant's permission)
- Store details: store domain, name, currency and time zone.
- Customer details: name, email address, phone number, shipping and billing address, tags, marketing consent status (email, SMS), number of orders and total spent.
- Orders: order number, items, totals, payment method (to detect cash on delivery), payment and fulfilment status.
- Abandoned checkouts: items, total and the checkout recovery link.
Created by BLU
- Customer segments (for example "VIP customers" or "at risk").
- Automated flow progress for each customer.
- Campaigns and the messages BLU sends, including delivery status.
- The merchant's "Ask BLU" chat history and brand voice settings.
BLU does not collect payment card numbers. BLU does not use tracking cookies on merchants' storefronts.
3. Why we use it
| Purpose | Data used |
|---|---|
| Confirm cash-on-delivery orders with the customer | Name, phone, address, order details |
| Send automated messages the merchant has switched on (abandoned cart, welcome, post-purchase, win-back, back in stock) | Name, email or phone, order and checkout details, consent status |
| Group customers into segments and personalise messages | Order history, totals, tags |
| Show the merchant results (messages sent, revenue from BLU) | Orders and message status |
| Draft campaigns with AI for the merchant to approve | Store details, product names and segment counts |
Marketing messages are only sent to customers who have given marketing consent for that channel. Order confirmation messages are sent because the customer placed an order.
4. AI
"Ask BLU" uses Anthropic's Claude to draft campaign ideas and message text. BLU sends the AI the store's name, products, segment names with customer counts and the merchant's brand voice settings. BLU does not send individual customers' names, emails, phone numbers or addresses to the AI. Personalisation such as the customer's first name is inserted by BLU when a message is sent. Nothing is sent until the merchant approves it.
5. Service providers
| Provider | Role | Location |
|---|---|---|
| Shopify | Source of store, customer and order data | Global |
| Cloudflare | Hosting and running the BLU app | Global network |
| Supabase | Database | Frankfurt, Germany (EU) |
| Anthropic | AI drafting for "Ask BLU" | United States |
| WhatsApp Business messaging provider and email provider | Delivering messages, once the merchant connects these channels | Depends on provider |
BLU does not sell personal data and does not share it for advertising.
6. How long we keep data
- Store, customer and order data: while BLU is installed.
- Message logs: 12 months.
- Abandoned checkout records and completed flow records: 90 days.
- Raw notifications received from Shopify: 30 days.
- When a merchant uninstalls BLU, its access token is deleted immediately. When Shopify sends the shop deletion request (48 hours after uninstall), all of that store's data is deleted.
- When Shopify sends a customer deletion request, that customer's data is deleted.
7. Security
- All connections use HTTPS. Data is encrypted at rest by our database provider.
- Every database table is locked so that only the BLU server can read or write it; browsers cannot access it directly.
- Shopify access tokens are stored separately, expire every hour and are rotated automatically.
- Requests from Shopify are verified with a cryptographic signature before they are processed.
- Access to production systems is limited to authorised staff using strong passwords and two-factor authentication.
8. Your rights
Customers of a store who want to access, correct or delete their data should contact the store directly. The merchant can request it through Shopify, and BLU will act on the request.
Merchants can contact us at privacy@getblu.uk to access, correct or delete their account data, or uninstall BLU to have all store data deleted as described above.
9. International transfers
Our database is in the EU. Some providers, such as Anthropic, process data in the United States. Where data leaves the EU, we rely on the providers' standard contractual safeguards.
10. Children
BLU is a business tool for merchants and is not directed at children.
11. Changes
If we change this policy, we will update the date at the top. Significant changes will be shown to merchants inside the BLU app.